SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-05
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 1751 | jekyllrb.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 45 d |
| 1752 | jellyfin.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 54 d |
| 1753 | jenkins-ci.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 68 d |
| 1754 | jetblue.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | 87 d | |
| 1755 | jetstar.com | A | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 98 d |
| 1756 | jewishencyclopedia.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 46 d |
| 1757 | jhsph.edu | A | 100 | — | – | TLS1.3 | InCommon Intermediate CA - OVG2C | — | 190 d |
| 1758 | jhu.edu | A | 100 | — | – | TLS1.3 | InCommon Intermediate CA - OVG2C | — | 190 d |
| 1759 | jhuapl.edu | A | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 142 d |
| 1760 | jibjab.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 45 d |
| 1761 | jiemian.com | A | 100 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | — | 150 d |
| 1762 | jigsy.com | A | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV E36 | — | 156 d |
| 1763 | jimmychoo.com | A | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 50 d |
| 1764 | jinshuju.net | A | 100 | — | – | TLS1.3 | Amazon ECDSA 256 M04 | — | 70 d |
| 1765 | jmir.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 78 d |
| 1766 | jmlr.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 91 d |
| 1767 | jn.pt | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 180 d |
| 1768 | jnj.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 68 d |
| 1769 | joann.com | A | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 141 d |
| 1770 | jogtar.hu | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 163 d |
| 1771 | johnlewis.com | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 131 d |
| 1772 | jooble.org | A | 100 | — | – | TLS1.3 | Google Trust Services | 87 d | |
| 1773 | jorudan.co.jp | A | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 168 d |
| 1774 | journaldemontreal.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 194 d |
| 1775 | joy.link | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 41 d |
| 1776 | jskingtex.com | A | 100 | — | – | TLS1.3 | Encryption Everywhere DV TLS CA - G2 | — | 33 d |
| 1777 | jtggtw.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 79 d |
| 1778 | juancole.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 61 d |
| 1779 | judiciary.uk | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 78 d |
| 1780 | juejin.cn | A | 100 | — | – | TLS1.3 | RapidSSL TLS RSA CA G1 | — | 75 d |
| 1781 | jumpshare.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 86 d |
| 1782 | juniperresearch.com | A | 100 | — | – | TLS1.3 | RapidSSL TLS RSA CA G1 | 78 d | |
| 1783 | jupyter.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 73 d |
| 1784 | justeasy.cn | A | 100 | — | – | TLS1.3 | Xcc Trust OV SSL CA | — | 83 d |
| 1785 | justgetflux.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 78 d |
| 1786 | justwatch.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 66 d |
| 1787 | jvcmusic.co.jp | A | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 114 d |
| 1788 | kaggle.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 68 d |
| 1789 | kahoot.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 103 d | |
| 1790 | kakao.com | A | 100 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | — | 134 d |
| 1791 | kalshi.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 51 d |
| 1792 | kansas.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 58 d |
| 1793 | kansascity.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 63 d |
| 1794 | kansascityfed.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 64 d |
| 1795 | karuka.tech | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 31 d |
| 1796 | kaspersky.com | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 107 d |
| 1797 | kassir.ru | A | 100 | — | – | TLS1.3 | GlobalSign GCC R3 DV TLS CA 2020 | — | 51 d |
| 1798 | kaufland.de | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 76 d |
| 1799 | kayak.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 83 d |
| 1800 | kb.nl | A | 100 | — | – | TLS1.3 | GEANT TLS ECC 1 | — | 101 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.